https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:14:07.026213+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-10786 CVE-2024-10786 — Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing 2026-10-07T12:14:07.056038+00:00

Affected: 10up Simple Local Avatars

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the sla_clear_user_cache function in all versions up to, and including, 2.7.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear user caches.